Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
File: z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft (raw, json)
Hash identifier: 49o60uIN8JpbbN7ocng2IyQ+lbjJ9z2P9FjwPGHAclo=
Subject key identifier: FA:5D:1C:81:62:3B:E8:A8:B9:8D:AA:AB:D6:07:5E:AF:F0:66:7F:BD
Authority key identifier: CF:C0:25:A9:D5:5B:FD:64:37:57:DA:4D:49:9D:CE:17:20:17:74:D2
Certificate issuer: /CN=cfc025a9d55bfd643757da4d499dce17201774d2
Certificate serial: 0199FCFD21015A30803C6D13858E82259F7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 15:01:11 +0000
Manifest this update: Sun 19 Oct 2025 15:01:11 +0000
Manifest next update: Mon 20 Oct 2025 15:01:11 +0000
Files and hashes: 1: 6U3Xs040zPO-wT1n1ipqEnLqdc0.roa (hash: iVKPeVo4dn6/xoX4wf7rwRU8cdeCDU4NP9VqaFlc7Ic=)
2: z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl (hash: FfP/sls65T4kS/EzpBju8WB6J/HtP4YPEB6XTqRsCsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:21:01:5a:30:80:3c:6d:13:85:8e:82:25:9f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc025a9d55bfd643757da4d499dce17201774d2
Validity
Not Before: Oct 19 15:01:11 2025 GMT
Not After : Oct 20 15:01:11 2025 GMT
Subject: CN=fa5d1c81623be8a8b98daaabd6075eaff0667fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5e:d9:01:b7:e0:f5:08:5c:fd:d9:b8:a9:cb:
52:96:43:06:be:33:5e:34:2f:5a:bc:64:a1:d1:5a:
1e:5d:69:64:55:05:bc:5b:b7:de:1c:ad:c6:6e:1f:
99:f7:11:d0:bc:14:be:61:9a:e1:1f:d5:9c:40:83:
3c:38:fa:12:a0:9b:5d:13:4a:08:f5:d6:58:29:f4:
70:c6:b9:9e:a1:ab:66:f8:ab:31:79:41:77:6e:e9:
ba:ba:50:09:ec:88:e9:3f:65:66:2e:16:7d:9c:14:
5b:ee:7a:c2:e3:cb:d1:da:1f:cf:60:2d:e5:95:c2:
24:16:92:22:ec:1a:85:19:33:ea:7f:5e:5d:e2:f5:
30:57:0d:15:94:46:3e:99:64:75:54:09:70:cb:28:
92:8e:f0:e1:52:77:80:6a:77:d9:d4:77:c9:42:0b:
50:5a:cb:2a:46:3c:e6:86:9c:74:e8:02:fb:2f:f6:
44:46:28:97:c9:69:4a:5b:69:97:9e:e3:8c:c2:b2:
e9:de:a8:be:88:76:44:07:68:58:ef:ee:75:e8:0e:
76:07:94:9a:57:21:a1:92:b8:9c:db:b9:e2:d3:2d:
4d:aa:de:44:26:5c:d6:09:3e:76:e6:0c:87:09:e0:
f1:a7:44:00:5c:89:33:44:37:50:73:38:1a:d0:1d:
56:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5D:1C:81:62:3B:E8:A8:B9:8D:AA:AB:D6:07:5E:AF:F0:66:7F:BD
X509v3 Authority Key Identifier:
keyid:CF:C0:25:A9:D5:5B:FD:64:37:57:DA:4D:49:9D:CE:17:20:17:74:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c3:9a:ad:4d:e5:a9:a4:54:68:f3:78:bb:07:ba:ae:f3:f1:
33:ab:34:ae:bb:04:db:23:e2:e2:76:f5:22:e7:e0:51:48:f7:
9f:f8:1e:f1:b8:be:36:fd:3d:e1:8e:cf:c5:93:6b:79:a5:c7:
ef:fc:e3:19:24:b0:ed:d9:1c:72:8d:7c:25:e7:7f:73:ac:49:
09:03:13:f9:6e:81:19:b7:e2:53:8d:fd:5f:98:c0:0c:0a:36:
3a:1a:d2:fb:e6:2f:fd:6d:45:a1:f1:4f:ee:a3:47:d5:d3:57:
c2:15:38:39:d9:08:12:d0:bd:f9:f6:4e:3c:05:bf:41:89:3f:
39:eb:8a:14:b3:d2:a9:8f:68:81:34:da:bd:47:cf:f5:ad:29:
45:4c:87:58:5b:7c:72:4f:2a:05:1b:77:8f:43:58:79:f3:ad:
52:4f:c0:18:39:07:f8:2c:a1:54:21:c4:a0:2b:13:88:db:39:
9b:25:31:bd:f8:4b:75:0b:58:15:39:34:51:9d:a3:9c:23:17:
21:43:f7:90:e7:e1:9c:0d:24:d6:38:d5:4c:f0:1c:c6:f6:ac:
b7:40:56:db:b5:95:98:28:92:2d:c1:dc:38:22:b7:d8:2f:1b:
96:2b:ba:fa:d3:34:5c:64:5c:7d:97:27:96:0a:bd:ba:e1:ec:
46:0f:5e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:05:20 2025 by rpki-client